Are you getting 403's when downloading? Please read here first

Meta Elastic
48

This has been allowed.

49

This has been allowed.

50

No!

root@graylog-2:~# apt-get update
Hit:1 http://kz.archive.ubuntu.com/ubuntu focal InRelease
Get:2 http://kz.archive.ubuntu.com/ubuntu focal-updates InRelease [114 kB]
Err:3 https://artifacts.elastic.co/packages/oss-7.x/apt stable InRelease
  403  Forbidden [IP: 34.120.127.130 443]
51

Can you please try again, we've checked and this is being allowed.

52

This has been allowed.

1 Like
53

Also:
IPv6: In 2a04:3540:1000:310::/64 range
Location: Helsinki, Finland

Err:9 https://artifacts.elastic.co/packages/7.x/apt stable InRelease
  403  Forbidden [IP: 2600:1901:0:1d7:: 443]
55

My server is now also getting blocked since a few days:

IP: 2a01:4f8:10a:1c49::/64
Location: Germany

56

Range:
217.174.224.0/20
95.85.96.0/19

Location:
Turkmenistan

Reposting because of no answer for one month.

57

Sorry about that, I must have missed this one :frowning: I have raised this internally and will chase it up with priority.

58

Tried via DM, but no response, so posting here for visibility:

IPv6: 2a03:94e0::/30 subnet
Location: Norway

403 error example:

wget https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.0-linux-x86_64.tar.gz
--2022-11-09 18:05:09--  https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.0-linux-x86_64.tar.gz
Resolving artifacts.elastic.co (artifacts.elastic.co)... 2600:1901:0:1d7::, 34.120.127.130
Connecting to artifacts.elastic.co (artifacts.elastic.co)|2600:1901:0:1d7::|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2022-11-09 18:05:09 ERROR 403: Forbidden.

ipinfo.io data for IPv6:

{
  "ip": "2a03:94e0::",
  "city": "Sandefjord",
  "region": "Vestfold og Telemark",
  "country": "NO",
  "loc": "59.1729,10.2149",
  "org": "AS56655 TerraHost AS",
  "postal": "3241",
  "timezone": "Europe/Oslo",
  "readme": "https://ipinfo.io/missingauth"
}

I truly appreciate what elastic team members do in their spare time to help with these issues. But I hope that someday we can get an automated system to report IP block for faster unblocks because right now this is a real nightmare to update manually all servers (8.5.1 just released)

59

I got your DM, unfortunately I am still waiting for the IP to be allowed sorry.

1 Like
60

DM sent ! Thanks a lot !

62

Hello, unblock pls.

  • ip:"31.172.77.158",
  • city:"Frankfurt am Main",
  • region:"Hesse",
  • country:"DE",
63

@bhawk @SuperTux88 @xinyi @todeveni @farmerKZ @niemanz these have been allowed. Thanks for your patience.

1 Like
64

It looks like I'm still blocked, have you allowed the whole /64 subnet?

65

Chasing this up now.

66

Hello, please unblock:

IP: 167.235.199.24
Location: Germany

67

@warkolm sorry, but it is still blocked from here:

$ wget https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.1-linux-x86_64.tar.gz
--2022-11-22 13:11:03--  https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.1-linux-x86_64.tar.gz
Resolving artifacts.elastic.co (artifacts.elastic.co)... 2600:1901:0:1d7::, 34.120.127.130
Connecting to artifacts.elastic.co (artifacts.elastic.co)|2600:1901:0:1d7::|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2022-11-22 13:11:03 ERROR 403: Forbidden.

$ wget elastic.co
--2022-11-22 13:09:28--  http://elastic.co/
Resolving elastic.co (elastic.co)... 2600:1901:0:1f6d::, 34.107.161.234
Connecting to elastic.co (elastic.co)|2600:1901:0:1f6d::|:80... connected.
HTTP request sent, awaiting response... 308 unknown
Location: https://elastic.co:443/ [following]
--2022-11-22 13:09:28--  https://elastic.co/
Connecting to elastic.co (elastic.co)|2600:1901:0:1f6d::|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2022-11-22 13:09:29 ERROR 403: Forbidden.

This happens on numerous servers from 2a03:94e0::/30 subnet, with a few weird exclusions here and there that can actually reach elastic servers. So If possible, please unblock the whole /30 subnet, it is properly geolocated and belongs to a single ASN entity.

68

Hi!

Please unblock
194.68.212.149
194.68.212.150
Location Sweden

69

Am chasing it up.